-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2719-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Michael Gilbert July 10, 2013 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : poppler Vulnerability : several vulnerabilities Problem type : local (remote) Debian-specific: no CVE ID : CVE-2013-1788 CVE-2013-1790 Debian Bug : 702071 Multiple vulnerabilities were discovered in the poppler PDF rendering library. CVE-2013-1788 Multiple invalid memory access issues, which could potentially lead to arbitrary code execution if the user were tricked into opening a malformed PDF document. CVE-2013-1790 An uninitialized memory issue, which could potentially lead to arbitrary code execution if the user were tricked into opening a malformed PDF document. For the oldstable distribution (squeeze), these problems have been fixed in version 0.12.4-1.2+squeeze3. For the stable (wheezy), testing (jessie), and unstable (sid) distributions, these problems have been fixed in version 0.18.4-6. We recommend that you upgrade your poppler packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.
Debian: DSA-2719-1: poppler security update
Multiple vulnerabilities were discovered in the poppler PDF rendering library. CVE-2013-1788
